fix(ci): stabilize production lambda runtime verification

[mottych]

Summary

• fix production workflow Lambda state check to run from coaching/pulumi
• add retry polling for State=Active and LastUpdateStatus=Successful
• keep deployment blocked only when Lambda remains unhealthy

Test plan

• previous failure reproduced in run 22692989830
• merge this PR to trigger Deploy Production
• verify production run completes (deploy + smoke tests)

[pulumi]

🍹 The Update for mottych/purposepath-coaching-api/preprod (at 9c0435e) was successful.

✨ Neo Explanation

This is a routine code deployment to preprod — a new Docker image for the coaching API has been built and the Lambda function is being updated to run it.

Root Cause Analysis

A new version of the coaching API application has been built and is being deployed to the preprod environment. The Docker image was rebuilt with a new build timestamp, producing a new image digest, which triggers an update to the Lambda function to point to this latest image.

Dependency Chain

A new Docker image was built from the coaching service's Dockerfile → the image is pushed to ECR with a new content digest → the Lambda function's imageUri is updated to reference the new image digest, completing the deployment.

Risk analysis

No risky changes detected.

Resource Changes

    Name            Type                          Operation
~   coaching-image  docker:index/image:Image      update
~   coaching-api    aws:lambda/function:Function  update